Cloud Provider X (which owns Cloud X) deploys two physical servers (Physical Servers A
and B) and two databases (Databases A and B). Virtual Servers A and B are hosted by
Physical Server A and Ready-Made Environments A and B are hosted by Virtual Server B.
Virtual Servers C and D are hosted by Physical Server B.
Cloud Service Consumer A regularly accesses Virtual Server D in order to test and deploy a new cloud service that
was developed on-premise by the cloud consumer organization operating Cloud Service
Consumer A.
Cloud Service Consumer B (operated by a different cloud consumer organization) has been regularly accessing Ready-Made Environment A in order to develop
and deploy a different new cloud service.
The cloud consumer organizations that own and operate Cloud Service Consumers A and
B will soon be ready to launch their respective cloud services for use by their customers.
Both cloud consumer organizations are concerned that Cloud X does not provide sufficient
security and they demand that Cloud Provider X take the necessary steps to mitigate the
denial of service, insufficient authorization and overlapping trust boundaries security
threats.

Which of the following statements accurately describes the cloud delivery models used now
by the cloud service consumers and in the future by their customers - and - further
describes a solution that fulfills the identified security requirements by implementing a
single cloud security mechanism?

• A. Cloud Service Consumer A is using the IaaS delivery model. Cloud Service Consumer B
  is using the PaaS delivery model. Customers of the cloud services will be using the SaaS
  delivery model. An identity and access management mechanism can be implemented to
  mitigate the denial of service, insufficient authorization and overlapping trust boundaries
  security challenges.
• B. Cloud Provider X is providing a hybrid delivery model comprised of a combination of the
  IaaS and PaaS delivery models, which means that Cloud Service Consumers A and B are
  using both the IaaS and PaaS delivery models. Customers of the cloud services will be
  using the PaaS delivery model. The single sign-on mechanism can be implemented to
  mitigate the denial of service and insufficient authorization security threats. The encryption
  mechanisms can be implemented to mitigate the overlapping trust boundaries security
  challenges.
• C. Cloud Service Consumer A is using the IaaS delivery model. Cloud Service Consumer B
  is using the SaaS delivery model. Customers of the cloud services will be using the PaaS
  delivery model. The encryption mechanism can be implemented to mitigate the denial of
  service, insufficient authorization and overlapping trust boundaries security threats.
• D. Cloud Service Consumer A is using the IaaS delivery model. Cloud Service Consumer B
  is using the PaaS delivery model. Customers of the cloud services will be using the SaaS
  delivery model. The digital signatures mechanism can be implemented to mitigate the
  denial of service, insufficient authorization and overlapping trust boundaries security
  challenges.

Cloud Service A is being made available on public Cloud X by Cloud Provider X via the
SaaS delivery model. Cloud Service A is hosted by Physical Server A that also hosts cloud
services being used by different cloud service consumers (and owned by different cloud
service owners).
Cloud Service Consumers A and B access Cloud Service A on a regular basis and
Physical Server A has been able to accommodate the resulting usage load After reviewing
the implementation environment for Cloud Service A.
Cloud Provider X determines it needs to enhance the ubiquitous access and multi-tenancy characteristics within this part of Cloud
X.

Which of the following statements accurately describes a solution that fulfills all of these
requirements?

• A. The resource replication mechanism can be introduced to address ubiquitous access
  requirements by broadening the range of cloud service consumers that can use Cloud
  Service A via standard service replication. The virtual server mechanism can be
  implemented to enable multi-tenancy via each service replication resulting from the
  application of the resource replication mechanism.
• B. The multi-device broker mechanism can be implemented to address ubiquitous access
  requirements by broadening the range of cloud service consumers that can access Cloud
  Service A.
  The resilient computing mechanism can be implemented to establish the
  multitenancy capabilities of Cloud Service A so that it will be able to resiliency
  accommodate the additional cloud service consumer devices that will gain access to it.
• C. The multi-device broker mechanism can be implemented to address ubiquitous access
  requirements by broadening the range of cloud service consumers that can access Cloud
  Service A.
  The virtual server mechanism can be implemented to establish the multitenancy
  capabilities of Cloud Service A.
• D. The resilient computing mechanism can be implemented to address ubiquitous access
  requirements by making Cloud Service A available to a broader range of cloud service
  consumer devices, including desktops running Web browsers and various mobile devices.
  The resource replication mechanism can be implemented to enable multi-tenancy within
  the Cloud Service A implementation.

Organization A has been expanding and, as a result, is outgrowing the processing capacity
of its on-premise Service A implementation. It is determined that this is due to usage
thresholds of Service A and complex data processing limitations in Database A.
The diagram depicts Organization A's current on-premise environment, where Service
Consumers A.
B and C attempt to access Service A at the same time. Service Consumer A
successfully accesses Service A, which then successfully retrieves the requested data (1).
Service Consumer B successfully accesses Service A, but due to the complex data
structure, the request for the data times out and fails (2). Finally, Service Consumer C
attempts to access Service A, but is rejected because Service A is unable to accept more
concurrent requests.

Organization A is required to continue using its on-premise Service A implementation, with
the exception of Database A, which does not need to remain on-premise. Database A is
dedicated to Service A and is comprised of relational data. Which of the following
statements provides a solution that uses cloud-based IT resources to solve the
performance limitations of Service A and Database A?

• A. The state management database and resource replication mechanisms can be
  implemented to establish redundant implementations of Service A and Database A in both
  on-premise and cloud environments. Using resource replication, a cloud-based duplicate of
  Service A (Cloud Service A) will be established in a public cloud and will remain in synch
  with Service A via regular replication cycles. Using the resource replication mechanism
  together with the state management database mechanism allows for Database A to be
  dynamically replicated in an independent state management database that has redundant
  implementations in both on-premise and cloud environments. The state management
  database can be further optimized to support non-relational data to improve data access
  performance.
• B. A cloud bursting solution can be implemented, whereby a redundant copy of Service A
  is implemented within a public cloud. This cloud-based, redundant implementation of
  Service A is referred to as Cloud Service A.
  A copy of Database A is also implemented within the cloud and both the on-premise and cloud-based copies of Database A are
  redesigned to be non-relational in order to improve data access performance. Service A
  continues to act as a first point of contact for Service Consumers A, B and C.
  An automated scaling listener is deployed so that when Service A's thresholds are met,
  requests are automatically routed to Cloud Service A.
• C. A failover system can be implemented in a hybrid architecture comprised of
  Organization A's existing on-premise environment and a public cloud environment. The
  failover system would span both environments so that when Service A is unable to process
  request messages from Service Consumers A, B or C, the failover system can
  automatically route messages to a redundant implementation of Service A residing in the
  public cloud. Similarly, when Database A is unable to process a data access request from
  Service A.the failover system can automatically route this request to a redundant
  implementation of Database A, also residing in the public cloud.
• D. None of the above